Bug 40459 – provide printers via gpo doesn't work when gpo is created at dc master central location

Bug 40459 - provide printers via gpo doesn't work when gpo is created at dc master central location


Summary:	provide printers via gpo doesn't work when gpo is created at dc master centra...

Status:	CLOSED WONTFIX

Product:	UCS@school
Classification:	Unclassified
Component:	Samba 4
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS@school 4.1 R2 vXXX
Assigned To:	Felix Botner
QA Contact:	Arvid Requate

URL:
Keywords:	interim-2

Depends on:	32041 40298
Blocks:	40300
	Show dependency tree / graph

Reported:	2016-01-19 15:54 CET by Felix Botner
Modified:	2017-10-16 21:36 CEST (History)
CC List:	7 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.137
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2016011921000162
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Felix Botner

2016-01-19 15:54:23 CET

+++ This bug was initially created as a clone of Bug #32041 +++

Please see ticket #2016011921000162 for more detail:

Problem now, ucs-school-slave.postinst and ucs-school-nonedu-slave.postinst call resync_object_from_ucs.py --filter '(objectClass=msPrintConnectionPolicy)'. This syncs all objects from the UCS Master (!) to the slaves s4 database. 

Now the connector tries to sync the s4 objects to the local ldap. But this fails because the objects are not in the local ldap (connector wants to add them), but they exist on the UCS Master (connector add fails, objects exists). This leads to various rejects.

The printerconnection objects are missing in the local ldap because at the time they were created, the slave had no read permissions (the read/write acl for these objects has been added with bug #32041)

Comment 1 Felix Botner

2016-01-19 15:55:21 CET

So we at least want to remove the "resync_object_from_ucs.py --filter '(objectClass=msPrintConnectionPolicy)'" from the postinst for slave and nonedu-slave

Comment 2 Felix Botner

2016-09-27 10:23:26 CEST

I don't think this is a problem anymore.

Rejects only happen if
 * msPrintConnectionPolicy are used
 * msPrintConnectionPolicy are created before Bug #32041 (2016-01-17)
 * system is updated from ucs@school 4.1 v3 to 4.1 v4

wont fix

Comment 3 Arvid Requate

2016-11-21 18:40:42 CET

Ok

Comment 4 Sönke Schwardt-Krummrich

2017-10-16 21:36:12 CEST

UCS@school 4.1 R2 v14 has been released.

http://docs.software-univention.de/changelog-ucsschool-4.1R2v14-de.html

If this error occurs again, please clone this bug.